463f9ed427c5d003dbe5d0c79ec0046f7f7b4b73d412588661bf86d3aca8088a

Analysis

max time kernel
29s
max time network
143s
platform
android_x64
resource
android-x64-arm64-20231215-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
submitted
13/02/2024, 02:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
463f9ed427c5d003dbe5d0c79ec0046f7f7b4b73d412588661bf86d3aca8088a.apk
Size 4.3MB
Sample240213-da9a6adh78
SHA256 463f9ed427c5d003dbe5d0c79ec0046f7f7b4b73d412588661bf86d3aca8088a
MD5 19d7d3ff409bf1b5ed9e8f73fbc7bda3
SHA1 ea7883aacb78245fbbbe0192635d94ffce7b73e2
SHA512 9a723550714b813d2b1a726e945d306ef3d7cb617fbfe802cd4b49ce403311fcb6b1f8f23c69b70d95343965d0650392ee9ea27293ff45bcb70da2b5cffde658
SSDEEP 98304:pA+u4Y1sNALlOUajvyoTwr5qTZ8s9EcRjJeA1kZ3:pAk8OdHlBJ83
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

banker

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs

banker

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.drnull.v5

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.drnull.v5

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.drnull.v5

com.drnull.v5
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:4479

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

PersistedInstallation8003866684594739tmp

Path /data/data/com.drnull.v5/files/PersistedInstallation8003866684594739tmp
Size 570B
SHA256 c33d0290cda5557839fa280a128c212cab70503f2e9a601edc988ceae87e1322
MD5 00e0d1f21ae4092f9f20ff586cd83a44
SHA1 be5a5b4e8775144d3833714cdc7aab05877165fb
SHA512 7a93f1a250ee861d94df7d0aa0f7c5b2943edb65fe431a37dd5add750e9d37d95b0774796d4ba3e08a83660f8a0ab337f309c2a34a42285e47e99c9cae9ba4e4
MD5 SHA1 SHA512

Submit Download

database.db

Path /data/data/com.drnull.v5/files/database.db
Size 102B
SHA256 1d88dc9cbb49efb8ef680d71597e190b78845b3618a1a9dd9e1b5457c48ee07e
MD5 44d4e065617615094f05bb3216cb94a4
SHA1 d897515baf0cb92f322bdc655d8ba43d1a4243e3
SHA512 9cc629ff85820243b5caa3ed8c66aff24f95ed8778abc0396e9befad6344e66544fe1b7ea3dc3bc0ff4b906c9286da5ed51920b35798c96d164428683aa8e2a7
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.drnull.v5/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 ec5319a761cf4be793773c6d0bc68456b7fc5b90975874552e4bef4e75285436
MD5 5305425eecf65ad4c4aeb7f5c8c47f38
SHA1 2d2217bcfbc0b1ffbc31b468276c1d2c7650ff77
SHA512 c064880e392494ee507f6923a2662c473d80edc48301f44e269785b3593cdc54b62d2c1210e2ad8967daec5943da858a4071e1bd38a6c779f2befbaaf09a3090
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.drnull.v5/primary.prof
Size 1KB
SHA256 87964145ade7a79f223cadc1c48ed417d86ac1872b5f6d533814312da485e6ba
MD5 3bf4327df6b1fcec0de5399a885183ed
SHA1 4f2ceeb901b71d3f3c5d56ee9ac0430c94088308
SHA512 5c3c3416af07cfa265043ee24909c59ea99d482f8e77f18a33b02cb0dfee6e48587341ee575dbd687fca82d249a00130c047b754994cfff9f9a4275724de4043
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads